Cloud Security Alliance News Clipping Site

Tag: local privilege escalation

  • Slashdot: Ubuntu Linux Impacted By Decade-Old ‘needrestart’ Flaw That Gives Root

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/11/21/0057206/ubuntu-linux-impacted-by-decade-old-needrestart-flaw-that-gives-root?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Ubuntu Linux Impacted By Decade-Old ‘needrestart’ Flaw That Gives Root Feedly Summary: AI Summary and Description: Yes Summary: The text details five local privilege escalation vulnerabilities found in the Linux utility “needrestart,” crucial for professionals in security and compliance to recognize, as they highlight significant risks associated with resource…

  • Bulletins: Vulnerability Summary for the Week of October 28, 2024

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/bulletins/sb24-309 Source: Bulletins Title: Vulnerability Summary for the Week of October 28, 2024 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info Patch Info acnoo — flutter_api  Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API allows Authentication Bypass.This issue affects Acnoo Flutter API:…

  • Slashdot: Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/10/29/2029233/local-privilege-escalation-vulnerability-affecting-xorg-server-for-18-years?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years Feedly Summary: AI Summary and Description: Yes Summary: The text discusses CVE-2024-9632, a security vulnerability in the X.Org Server that has persisted for 18 years. This flaw could allow for local privilege escalation and is critical for professionals involved…

  • Hacker News: Can You Get Root with Only a Cigarette Lighter?

    —

    by

    system automation
    in

    Source URL: https://www.da.vidbuchanan.co.uk/blog/dram-emfi.html Source: Hacker News Title: Can You Get Root with Only a Cigarette Lighter? Feedly Summary: Comments AI Summary and Description: Yes Summary: This text discusses hardware fault injection techniques, specifically targeting memory exploitation via electromagnetic interference (EMI) in laptops to facilitate local privilege escalation on Linux systems. This approach is novel in…

  • Hacker News: Local Privilege Escalation via MSI Installer

    —

    by

    system automation
    in

    Source URL: https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-softmaker-office-freeoffice/ Source: Hacker News Title: Local Privilege Escalation via MSI Installer Feedly Summary: Comments AI Summary and Description: Yes Summary: The text details a critical local privilege escalation vulnerability (CVE-2023-7270) in SoftMaker Office and FreeOffice installations that can be exploited by low-privileged users. It highlights the need for immediate security patching and a…